@jerrycan1991#106540 Tech Support Scam Page 2 A 8242019
Location attack happened: A Washington State Library
Screen of live attack:
Tech-Support-Scam-Page-A28242019-A hosted at ImgBB — ImgBB
Tech-Support-Scam-Page-A28242019-B hosted at ImgBB — ImgBB
Attacking link: 157.230.132.4
supposed provider: ISP: Glenayre Electronics
Organization: Glenayre Electronics
Glenayre Electronics
There are 1 domains that matched this search query.
These are listed below:
Domain Name Creation Date Registrar
gentech.com.sg 2000-07-03 CYBERSITE SERVICES PTE LTD
https://caselaw.findlaw.com/us-7th-circuit/1233015.html
City of Phoenix v. Glenayre Electronics, Inc. :: 2017 :: Arizona Supreme Court Decisions :: Arizona Case Law :: Arizona Law :: US Law :: Justia
Glenayre Electronics, Inc., Plaintiff-appellee, v. Phillip Jackson and Pmj Family Limited Partnership, Defendants-appellants, 443 F.3d 851 (Fed. Cir. 2006) :: Justia
Attacking domain: 157.230.132.4
Attacking IP: 157.230.132.4
OrgNOCHandle: NOC32014-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-347-875-6044
OrgNOCEmail: [email protected]
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC32014-ARIN
Extra data:
Date resolved
Domain 2019-07-30
archaea.io 2019-03-20
www.cipolla.studio 2019-03-20
cipolla.studio
SUBORDINATE IP RESOLUTION
104.131.79.183
VirusTotal
OrgNOCHandle: NOC32014-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-347-875-6044
OrgNOCEmail: [email protected]
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC32014-ARIN
@jerrycan1991#106540
I am hard black listing that Ip and any ip connected to it.
The server is only used to serve the pages. I wonder, why, that is?
@MasterBlaster#106558 That IP appears to be operated by DigitalOcean. They are the go-to VPS provider for scammers. They’re really not that expensive, and they can handle a lot of requests at once, and can serve multiple domains containing phishing scams.